$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft File: 5xSoFJfIF3hoy7TNszjD72zp6VM.mft (raw, json) Hash identifier: hcR/Xv5PfET8bLfaos4ljK86G53MYj/2dZPOq5Y/974= Subject key identifier: 44:90:CD:17:97:2A:69:22:2A:E1:01:83:5F:ED:41:6F:38:A5:DC:D3 Authority key identifier: E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 Certificate issuer: /CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Certificate serial: 0AEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft Manifest number: 0ADF Signing time: Thu 26 Mar 2026 19:19:29 +0000 Manifest this update: Thu 26 Mar 2026 19:19:28 +0000 Manifest next update: Thu 02 Apr 2026 19:19:28 +0000 Files and hashes: 1: 5xSoFJfIF3hoy7TNszjD72zp6VM.crl (hash: YGfxEFCDD1mwrTd7nhaWovxmFckFLuJu/jvIlJocRvA=) 2: 9085F6C0B78911EFB9994180C4F9AE02.roa (hash: u8WkqF58twBf7V4x+gVZYpgUq+L7j/Jz1XNkEqJ+tfM=) 3: CDD96B60B78911EF9BD3EF80C4F9AE02.roa (hash: +vuV01yjXB1+RoW7WbOmTfoAon5Ua6XhR4wfKoKtImw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2798 (0xaee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172C8D, serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Validity Not Before: Mar 26 19:19:28 2026 GMT Not After : Apr 2 19:19:28 2026 GMT Subject: CN=69c586c1-b613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:b0:1c:2c:fa:c0:87:8d:ce:d1:28:ca:07: 80:80:ce:7b:eb:92:4c:02:a4:74:1f:5c:79:de:9e: ab:0e:0b:ff:5c:c0:0d:dd:5a:c6:c9:8b:ac:76:28: c0:07:03:da:d8:f6:10:a7:4e:13:59:95:dd:20:26: fa:b2:6e:a6:e2:09:45:ba:0e:ba:5b:b6:81:d0:9d: 4d:da:9b:58:4a:c0:49:50:d8:3a:45:93:4b:4a:62: 44:34:cf:15:fa:e5:70:f5:da:22:de:c7:2e:b5:21: 0e:cb:2a:2e:a1:9c:76:e9:73:d2:76:b3:47:46:d4: e0:78:cc:f7:d9:5d:e0:c5:aa:59:7c:67:3b:cb:06: 50:17:99:ed:41:97:28:4a:7b:5b:49:c1:5c:24:84: b4:55:0e:71:48:6b:83:da:90:ed:fa:3f:c7:b8:29: 16:14:7a:d3:01:19:09:b6:5d:c5:68:1b:6a:6a:66: 23:19:fc:1f:86:90:cb:24:93:9b:ed:a2:50:cf:8f: ae:22:be:39:ab:96:81:4c:22:36:d8:34:e2:60:80: ef:da:c7:9c:3d:65:cb:10:b9:2c:12:68:81:29:11: 6a:68:45:32:7f:c4:6d:fa:e8:b4:f1:49:e6:2e:b6: 2a:9e:ad:bd:cd:37:00:af:8f:6f:cf:34:c7:d7:6c: 16:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:90:CD:17:97:2A:69:22:2A:E1:01:83:5F:ED:41:6F:38:A5:DC:D3 X509v3 Authority Key Identifier: keyid:E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:4c:d2:ca:41:15:d9:e1:db:a8:79:6f:81:b7:33:68:40:98: e6:66:d6:03:57:a0:1d:de:4a:73:bd:4b:bf:45:a5:c0:ac:7d: 81:08:bc:1d:68:58:ed:91:01:1d:05:28:1b:10:66:cd:b2:a9: 53:bd:b6:3f:c3:36:28:4f:29:ef:24:98:a3:d5:22:78:3d:b6: 32:da:c5:61:2b:a4:c8:be:2a:dd:09:0a:a0:48:0b:e4:70:a6: fd:e2:a3:9a:20:87:1c:23:ba:d1:b9:54:4f:7b:fd:5d:35:2a: 39:dc:23:8b:c8:22:25:f4:3f:ec:02:7c:7d:34:17:86:8d:c3: 67:6c:f5:4c:c3:e3:ec:f8:49:08:d1:41:c0:cb:3b:ce:e6:28: 94:e4:de:07:e9:43:2c:1c:76:77:fa:c0:fa:40:dc:fd:1e:6f: d1:a1:a6:ff:fd:43:cd:eb:95:a6:ee:49:bf:5e:74:99:85:31: 4b:b7:00:c7:74:dd:33:f2:54:f5:83:64:0f:c3:c8:9a:66:1f: c5:2e:66:2c:e5:a5:b1:89:12:0f:f4:f9:cd:d2:80:79:e0:22: b7:14:2b:e2:b2:1c:47:50:47:56:25:ed:55:6f:71:66:0f:eb: ee:76:ba:b3:3d:39:c4:f0:c0:8e:28:c2:96:ea:d5:eb:ec:d7: 5c:0e:13:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDOEQxMTAvBgNVBAUTKEU3MTRBODE0OTdDODE3Nzg2OENCQjRDREIzMzhDM0VG NkNFOUU5NTMwHhcNMjYwMzI2MTkxOTI4WhcNMjYwNDAyMTkxOTI4WjAYMRYwFAYD VQQDEw02OWM1ODZjMS1iNjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOewHCz6wIeNztEoygeAgM5765JMAqR0H1x53p6rDgv/XMAN3VrGyYusdijA BwPa2PYQp04TWZXdICb6sm6m4glFug66W7aB0J1N2ptYSsBJUNg6RZNLSmJENM8V +uVw9doi3scutSEOyyouoZx26XPSdrNHRtTgeMz32V3gxapZfGc7ywZQF5ntQZco SntbScFcJIS0VQ5xSGuD2pDt+j/HuCkWFHrTARkJtl3FaBtqamYjGfwfhpDLJJOb 7aJQz4+uIr45q5aBTCI22DTiYIDv2secPWXLELksEmiBKRFqaEUyf8Rt+ui08Unm LrYqnq29zTcAr49vzzTH12wWnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFESQzReX KmkiKuEBg1/tQW84pdzTMB8GA1UdIwQYMBaAFOcUqBSXyBd4aMu0zbM4w+9s6elT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkM4RC85QTExMDg2NDY5 QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYzaG95N1ROc3pqRDcyenA2 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4U29GSmZJRjNob3k3VE5zempENzJ6cDZWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkM4RC85QTExMDg2NDY5QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYz aG95N1ROc3pqRDcyenA2Vk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcUzSykEV2eHbqHlvgbczaECY5mbWA1egHd5Kc71Lv0WlwKx9gQi8HWhY7ZEB HQUoGxBmzbKpU722P8M2KE8p7ySYo9UieD22MtrFYSukyL4q3QkKoEgL5HCm/eKj miCHHCO60blUT3v9XTUqOdwji8giJfQ/7AJ8fTQXho3DZ2z1TMPj7PhJCNFBwMs7 zuYolOTeB+lDLBx2d/rA+kDc/R5v0aGm//1DzeuVpu5Jv150mYUxS7cAx3TdM/JU 9YNkD8PImmYfxS5mLOWlsYkSD/T5zdKAeeAitxQr4rIcR1BHViXtVW9xZg/r7na6 sz05xPDAjijClurV6+zXXA4T7g== -----END CERTIFICATE-----Generated at Thu Mar 26 23:03:43 2026 by rpki-client